Prevent to Assign an Issue to a person who cannot see the issue due to security level scheme

N

Hi,

hope someone has an idea:

How one can prevent that it is possible to assign an issue to a user who may not see this issue due to settings of the stored security level

Current settings:

The user is member of a group. The group has the permission “Browse Project” and “Assignable User” in the permission scheme. Via the additional security level scheme the user cannot browse an issue. But this issue can be assigned to him. How can this be prevented.

 

Any ideas are appreciated

Regards

Norbert

Kirill Skuibida

Hi Norbert,

Unfortunately, from what you've just explained I can state that as long as the user is a member of the group with "Assignable User" permission for this project - he/she will be available within the assignee user selection even though he/she has no rights to view the issue due to the issue security layers. You might reconsider the process and the set up of your security regulations: permission schemes, group membership etc.